Senate Bill 122 amends the Business & Commerce Code to create the Identity Theft Enforcement and Protection Act. The bill prohibits a person from obtaining, possessing, transferring, or using certain personal identifying information of another person, without the other person's consent, to obtain a good, service, insurance, extension of credit, or any other thing of value in the other person's name. The bill imposes a duty on persons who conduct business in Texas to protect and safeguard certain personal information collected or maintained in the regular course of business and to provide notification to affected persons residing in Texas of a breach of security of computerized data containing certain personal information. The bill sets out specific procedures for and exceptions to notification. The bill provides that a person who violates this act is liable to the state for certain civil penalties recoverable by the attorney general and sets out procedures for such an action. The bill also makes this activity actionable under the Deceptive Trade Practices Act. Senate Bill 122 allows certain victims of identity theft to file an application with a district court for the issuance of a court order declaring that the person is a victim of identity theft. The bill sets out procedures for issuing and vacating such an order and makes the order confidential, except for use in certain civil proceedings. The bill also amends the Code of Criminal Procedure to require a peace officer to whom an alleged act of fraudulent use of identifying information has been reported to make a written report to the officer's employing agency that includes certain information about the victim and the theft and to authorize the report to be given to the victim if requested by the victim.